Splunk Search

How to display host types in Y axis and X axis chart?

Explorer

I have different host types (like SC, RC and etc) and its different version(18.1, 19, 19.1 and etc). I am trying to display host types in Y axis and respective Version in X axis. Tried using stats command but couldn't get what i want. Your thoughts pls?

0 Karma
1 Solution

Motivator

Hello @jayachandrank,
Can you use chart instead of stats? Something like...

| chart count by host_types, version

Replace host_types with the field you want to display on Y-axis and version with the field you want to display on X-axis. Replace count by whatsoever operation you want.

Hope this helps!!!

View solution in original post

0 Karma

Esteemed Legend
0 Karma

SplunkTrust
SplunkTrust

@jayachandrank would it be possible to add a mock screenshot to your question? Also post what is your current query and output.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

Explorer

I think you do want chart but you have to do the OVER and BY splitting

| chart count over version by types

0 Karma

Motivator

Hello @jayachandrank,
Can you use chart instead of stats? Something like...

| chart count by host_types, version

Replace host_types with the field you want to display on Y-axis and version with the field you want to display on X-axis. Replace count by whatsoever operation you want.

Hope this helps!!!

View solution in original post

0 Karma